Lucene search
K

34 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed the issue where the unlock operation was not matched correctly for the DMUB HW lock in the HWSS fast path. Why The evaluation of whether we need to use the DMUB HW lock is different from the evaluation of...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/15 4:51 p.m.3 views

EUVD-2026-30571

The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends contains two fast-path verification bugs for standard P2PKH and native P2WPKH spends in core/src/main/java/org/bitcoinj/script/ScriptExecution.java. In both branches, bitcoinj...

7.5CVSS5.9AI score0.00011EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/13 5:30 p.m.24 views

CVE-2026-44003 vm2: Transformer Fast-Path Bypass Exposes Internal State Variable

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, import, or async keywords. This fast-path bypass allows sandboxed code to directly access the internal...

5.3CVSS0.00049EPSS
Exploits1References1
CVE
CVE
added 2026/05/13 5:30 p.m.9 views

CVE-2026-44003

vm2 (Node.js sandbox) prior to version 3.11.0 includes a transformer fast-path that bypasses AST analysis when code does not contain catch, import, or async, allowing sandboxed code to access internal state VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL and its security helpers (handleExcepti...

5.8CVSS5.8AI score0.00049EPSS
Exploits1References1Affected Software1
SUSE CVE
SUSE CVE
added 2026/05/13 3:35 a.m.1 views

SUSE CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.8AI score0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/11 9:30 a.m.4 views

EUVD-2026-29037

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...

7.8CVSS5.8AI score0.43539EPSS
Exploits19References4
Microsoft CVE
Microsoft CVE
added 2026/05/09 8:3 a.m.4 views

drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path

...

5.5CVSS5.8AI score0.00013EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/08 6:53 p.m.6 views

CVE-2026-43305

A flaw was found in the drm/amd/display component of the Linux kernel. A mismatched unlock operation for the DMUB hardware HW lock in the HWSS fast path can occur. This happens because the logic for determining when to use the lock differs from the logic for when to unlock it. When the fast path ...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/08 3:31 p.m.4 views

EUVD-2026-28575

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.8AI score0.00013EPSS
Exploits0References3
NVD
NVD
added 2026/05/08 2:16 p.m.3 views

CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.5CVSS0.00013EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/05/08 2:16 p.m.2 views

CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References4
OSV
OSV
added 2026/05/08 2:16 p.m.2 views

UBUNTU-CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/08 1:11 p.m.24 views

CVE-2026-43305 drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

0.00013EPSS
Exploits0References2
CVE
CVE
added 2026/05/08 1:11 p.m.9 views

CVE-2026-43305

CVE-2026-43305 details a Linux kernel DRM AMD display issue where the DMUB HW lock unlock path in the HWSS fast path could hang due to a mismatch between evaluating the need for the lock and unlocking. The fix introduces a flag to track whether the lock should be used and applies that flag to gov...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:11 p.m.1 views

CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.8AI score0.00013EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 1:11 p.m.1 views

CVE-2026-43305

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path Why The evaluation for whether we need to use the DMUB HW lock isn't the same as whether we need to unlock which results in a hang when the fast path is us...

5.5CVSS5.7AI score0.00013EPSS
Exploits0
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.4 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistencies between the conditions for evaluating and unlocking dmub HW locks. This...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.3 views

PT-2026-38947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatched unlock for the DMUB HW lock occurs in the HWSS fast path. This happens because the evaluation for requiring the DMUB HW lock differs from the evaluation for unlocking it,...

5.8AI score0.00013EPSS
Exploits0References6
OSV
OSV
added 2026/05/07 4:32 a.m.2 views

GHSA-WP5R-2GW5-M7Q7 vm2's Transformer Fast-Path Bypass Exposes Internal State Variable

Summary vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, import, or async keywords. This fast-path bypass allows sandboxed code to directly access the internal VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL variable, which exposes...

5.3CVSS5.8AI score0.00049EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/05/07 4:32 a.m.5 views

vm2's Transformer Fast-Path Bypass Exposes Internal State Variable

Summary vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, import, or async keywords. This fast-path bypass allows sandboxed code to directly access the internal VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL variable, which exposes...

5.8CVSS5.8AI score0.00049EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder